Recently a user operating Android TV was shocked to find private photos and leaked Google account in the settings of Google Home App. He shared the bug through tweets and received a mixed response from users around the globe. SmartTV that runs on Android offers you access to various apps and additional feature by authenticating it through Google Accounts.
In response to the threat, Google instantly shutdown Android TV Photo sharing an account for a temporary period. The bug exposes Google accounts that are linked to Google Home App. That means the app just gives access to the list of an account connected and the same goes to Google Photo Albums. Technically one account has no authority to access data from a secondary account, but somehow an internal bug is merging permissions allowing a few accounts to get access to private photos.
The user shared a video that shows a list of visible account in the app on the TV platform. The issue has been detected for VU and iFFalcon TV.
Connected accounts leak was not that serious but later the user shared another tweet where he showed the photos of unsuspecting strangers are visible on ambient mode screensaver. Under the Google Photos settings, the user’s account can enable photos from all linked account which is a serious concern.
This is a huge privacy violation where broadcasting personal photos to strangers big screen TV is not something we can ignore. Android TV’s are getting are common today and it just needs a Gmail account to access the services. Also, it gives a convenient way to share photos and videos with family and friends, but it is essential Google should have strict security measures to avoid such leaks.
In response, Google has suspended photo services to resolve the bug.